Location
London

Hours
Follow-the-sun shift rotation: 1200hrs - 0000hrs (midday to midnight) London Time, 4 days on, 4 days off rotation

Salary
Negotiable

About the Role
The London Stock Exchange Group (LSEG) is seeking an experienced, dedicated, and driven Attack Monitoring Analyst to join the Global Security Operations Centre (GSOC) team. As part of LSEG Security Operations, you will be involved in continuously monitoring and responding to cyber security incidents using people, process, and technology. This role focuses on identifying and responding to cyber security incidents and enhancing the defensive capabilities of the GSOC. The ideal candidate will have a strong technical background, a solid understanding of modern attack techniques, and knowledge of the typical lifecycle of cyber attacks. You will triage security events, respond methodically to incidents using established playbooks, operate SIEM tools such as Splunk, QRadar, or LogRhythm, and contribute to the development of monitoring dashboards and run books. Staying current with vulnerabilities, attack methods, and countermeasures is essential. You will also research and collect threat intelligence to improve detection capabilities and respond effectively to cyber events.

About London Stock Exchange Group
Join a global leader in financial markets infrastructure and data, with a purpose to drive financial stability, empower economies, and enable sustainable growth. LSEG values integrity, partnership, excellence, and change, fostering a collaborative and creative culture across 25,000 employees in 65 countries. The company is committed to diversity, inclusion, sustainability, and community engagement through the LSEG Foundation. Benefits include healthcare, retirement planning, paid volunteering days, and wellbeing initiatives.

Experience
- Operating or administrating SIEM platforms such as Splunk, QRadar, or LogRhythm
- Solid understanding of networks including the TCP/IP stack, typical organizational architectures, and common protocols abused by malware
- Security event analysis, triage, incident handling, and root-cause identification
- Knowledge of attacker tools, techniques, and procedures, ideally from direct experience
- Cyber security knowledge gained academically or within corporate environments
- Ability to work calmly in a fast-paced and demanding environment
- Strong verbal and written communication and collaboration skills
- Security industry certifications such as OSCP, GIAC, CCNA
- Certifications demonstrating SIEM operational competence
- Proficiency in one or more programming languages (e.g. Python, PowerShell, Java, C#)

About you
Associate career stage professional with a passion for cyber security and continuous improvement. You are motivated to contribute to a dynamic team, eager to learn, and committed to maintaining high standards of security operations.

Qualifications
Relevant security certifications and technical accreditations are highly desirable. Practical experience with SIEM tools and programming skills will support your success in this role.